CVE-2026-65548

creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcelol42b...

CVE-2026-65546

creationtimestamp| type| source ---|---|--- 2026-08-06 16:06:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msggcd7m3t2o 2026-08-12 00:16:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msttzaxsnp2a...

CVE-2026-12713

creationtimestamp| type| source ---|---|--- 2026-08-06 15:44:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msgf332ylu2l...

CVE-2026-65545

Unauthenticated Cross Site Scripting XSS in AI Engine = 3.6.8 versions...

libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC Scalable Video Coding layer ID control function allows setting a spatiallayerid exceeding the configured number of layers. This causes an out-of-bounds heap rea...

EEF-CVE-2026-66370 html_sanitize_ex HTML5 scrubber keeps attacker-supplied form-association attributes, allowing form hijacking

Summary URL Redirection to Untrusted Site 'Open Redirect' vulnerability in the HTML5 scrubber in rrrene html\sanitize\ex allows an unauthenticated remote attacker to retarget a form already on the rendering page and receive whatever the victim submits, including credentials, via the form and...

MINI-2Q9M-8XXP-V452

Bulletin has no description...

MINI-3WV6-8JHJ-382V

Bulletin has no description...

MINI-8GGP-3XVV-5P3P

Bulletin has no description...

MINI-WVXJ-XXHP-HM29

Bulletin has no description...

CVE-2026-19041 MissionSquad mcp-api NPM Package Version packages.ts this.packageService.installPackage command injection

A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. The impacted element is the function this.packageService.installPackage of the file src/controllers/packages.ts of the component NPM Package Version Handler. The manipulation leads to command injection. It is possible to initiat...

CVE-2025-15028

creationtimestamp| type| source ---|---|--- 2026-08-06 12:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/dtvp6pbzlkjjo 2026-08-06 14:38:42+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3msgbg4bidk2m 2026-08-07 09:15:08+00:00| seen|...

CVE-2026-64585

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:11+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64585...

CVE-2026-64586

creationtimestamp| type| source ---|---|--- 2026-08-06 12:15:09+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-64586...

GHSA-2M8M-JHRM-W6J2

creationtimestamp| type| source ---|---|--- 2026-08-06 10:32:49+00:00| seen| https://gist.github.com/alon710/67103eb26c8040be3d1015d9a77a7298...

CVE-2026-19020

creationtimestamp| type| source ---|---|--- 2026-08-06 08:46:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gbgegon2uzx2u...

MINI-6RHV-7FJ4-577C

Bulletin has no description...

MINI-H6PM-3PV4-VJG7

Bulletin has no description...

MINI-C2RX-FRHF-5Q7H

Bulletin has no description...

CVE-2026-18050

The Events Manager WordPress plugin before 7.4 does not perform any authorization check on a REST route that serves temporarily stored file uploads, allowing unauthenticated users to retrieve another user's in-progress upload when its temporary identifier is known. The identifier is high-entropy,...